commit 1a9e71c8a34c0e15c988234437a09da214e49512
author Jian Li <pyguni@gmail.com> Tue Apr 03 19:00:29 2018 +0900
committer Thomas Vachuska <tom@opennetworking.org> Tue Apr 10 22:32:36 2018 +0000
tree a869ec42d3d19242f88ba1274f0c8da58988c882
parent dc8a55609dddd3d8c617e3e36a0a7cf7568a64bb

Ignore SSL varification when authenticate with keystone service

Change-Id: Id4ce2513c59ee2d4ddd2905aa94fa9b57ce88e26

apps/openstacknetworking/app/src/main/java/org/onosproject/openstacknetworking/cli/OpenstackSyncStateCommand.java

diff --git a/apps/openstacknetworking/app/src/main/java/org/onosproject/openstacknetworking/cli/OpenstackSyncStateCommand.java b/apps/openstacknetworking/app/src/main/java/org/onosproject/openstacknetworking/cli/OpenstackSyncStateCommand.java
index c311889..ddabb62 100644
--- a/apps/openstacknetworking/app/src/main/java/org/onosproject/openstacknetworking/cli/OpenstackSyncStateCommand.java
+++ b/apps/openstacknetworking/app/src/main/java/org/onosproject/openstacknetworking/cli/OpenstackSyncStateCommand.java
@@ -25,6 +25,7 @@
 import org.onosproject.openstacknetworking.api.OpenstackSecurityGroupAdminService;
 import org.openstack4j.api.OSClient;
 import org.openstack4j.api.exceptions.AuthenticationException;
+import org.openstack4j.core.transport.Config;
 import org.openstack4j.model.common.Identifier;
 import org.openstack4j.model.network.IP;
 import org.openstack4j.model.network.NetFloatingIP;
@@ -36,11 +37,18 @@
 import org.openstack4j.openstack.OSFactory;
 import org.openstack4j.openstack.networking.domain.NeutronRouterInterface;
 
+import javax.net.ssl.HostnameVerifier;
+import javax.net.ssl.HttpsURLConnection;
+import javax.net.ssl.SSLContext;
+import javax.net.ssl.TrustManager;
 import java.io.IOException;
 import java.util.List;
 import java.util.Objects;
 import java.util.stream.Collectors;
 
+import javax.net.ssl.X509TrustManager;
+import java.security.cert.X509Certificate;
+
 import static org.openstack4j.core.transport.ObjectMapperSingleton.getContext;
 
 /**
@@ -89,13 +97,39 @@
 
         OSClient osClient;
 
+        Config config = Config.newConfig().withSSLVerificationDisabled();
+
+        TrustManager[] trustAllCerts = new TrustManager[]{
+            new X509TrustManager() {
+                public X509Certificate[] getAcceptedIssuers() {
+                    return null;
+                }
+
+                public void checkClientTrusted(X509Certificate[] certs, String authType) {
+                }
+
+                public void checkServerTrusted(X509Certificate[] certs, String authType) {
+                }
+            }
+        };
+
+        HostnameVerifier allHostsValid = (hostname, session) -> true;
+
         try {
+            SSLContext sc = SSLContext.getInstance("SSL");
+            sc.init(null, trustAllCerts, new java.security.SecureRandom());
+            HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
+            HttpsURLConnection.setDefaultHostnameVerifier(allHostsValid);
+
+            config.withSSLContext(sc);
+
             if (endpoint != null) {
                 if (endpoint.contains(KEYSTONE_V2)) {
                     osClient = OSFactory.builderV2()
                             .endpoint(this.endpoint)
                             .tenantName(this.tenant)
                             .credentials(this.user, this.password)
+                            .withConfig(config)
                             .authenticate();
                 } else if (endpoint.contains(KEYSTONE_V3)) {
 
@@ -106,6 +140,7 @@
                             .endpoint(this.endpoint)
                             .credentials(this.user, this.password, domain)
                             .scopeToProject(project, domain)
+                            .withConfig(config)
                             .authenticate();
                 } else {
                     print("Unrecognized keystone version type");